strongswan Archives

Networking tutorial - IT technology blog

Deploying DMVPN on Linux with strongSwan and OpenNHRP: Dynamic Spoke-to-Spoke VPN Architecture

November 4, 2026

Eliminate VPN hair-pinning and Hub saturation. Learn how to deploy Dynamic Multipoint VPN (DMVPN) on Linux using strongSwan, mGRE, and OpenNHRP to build dynamic, direct spoke-to-spoke encrypted tunnels on demand.

Networking

IPsec Site-to-Site VPN: Connect Linux to AWS VPC with strongSwan and BGP

November 1, 2026

Learn how to build a resilient IPsec Site-to-Site VPN between Linux and an AWS VPC using strongSwan and BGP. This guide covers route-based VTI configuration, FRRouting peering, dual-tunnel active/standby failover, and TCP MSS clamping.

Networking

Route-Based IPsec VPN with strongSwan and VTI on Linux: Secure Cloud-to-On-Premises Connectivity

October 19, 2026

Build a route-based IPsec VPN on Linux with strongSwan and VTI. Learn how to configure XFRM marks, automate tunnel interfaces, avoid MTU black holes, and route hybrid cloud subnets without downtime.

Networking

Configuring GRE over IPsec on Linux for Secure OSPF Dynamic Routing

October 4, 2026

Pure IPsec tunnels drop the multicast packets that dynamic routing protocols like OSPF require. This operational guide shows you how to wrap GRE in IPsec transport mode on Linux, securing branch-to-branch links while maintaining dynamic route adjacencies.

Networking

Setup L2TP/IPsec VPN on Linux: No-App Remote Access for iOS, Android, and Windows

August 27, 2026

Tired of managing VPN apps for non-tech users? Learn how to set up a native L2TP/IPsec VPN on Linux that works out-of-the-box on iOS, Android, and Windows.

Networking

Site-to-Site VPN with StrongSwan IPsec IKEv2: A Production-Ready Linux Guide

April 18, 2026

Build a high-performance Site-to-Site VPN using StrongSwan on Linux. This guide covers IKEv2 configuration with swanctl, firewall tuning, and MSS clamping for maximum stability.